Pre-sign policy firewall

Prove what an agent was allowed to propose.

ChainMandate evaluates structured onchain intents against owner-defined risk limits before a customer-controlled signer decides whether to act.

POST /v1/evaluations
{ "agent":"treasury-7",
  "action":"open ETH perp",
  "notional":"600", "leverage":"5" }

DENY
LIMIT.ORDER_NOTIONAL · max 500 USD
LIMIT.LEVERAGE · max 3×

receipt sha256:a9d7… signed
The missing control plane

Your wallet knows what an agent can sign. We provide evidence about what it should sign.

Wallet spend limits do not understand leverage, portfolio exposure, drawdown, stale prices or whether an order still matches the owner's mandate.

Deterministic risk

Decimal-safe limits for venue, asset, notional, leverage, exposure, daily loss, order rate, slippage and stop distance.

Fail closed

Unknown venue, stale market state, unverified account state or missing risk input produces a denial or human review.

Signed evidence

Every returned decision is bound to the intent, policy version, wallet and expiry in a tamper-evident receipt chain.

Integration

One decision endpoint. Zero signing authority.

01 · INTENT

Agent proposes

Structured order, no prompt text.

02 · EVALUATE

SigFence checks

Attested connector state plus immutable policy.

03 · DECISION

Allow, deny, review

Short-lived signed receipt.

MVP boundary: ChainMandate does not hold keys, sign transactions, transmit orders or choose investments. Version 0.1 is advisory shadow infrastructure.
Paid pilot

Ten days from unknown risk to measurable shadow evidence.

The Agent Safety Sprint maps your agent's trust boundaries, installs its first mandate and evaluates real shadow traffic without receiving signing authority.

Threat model

Agent, wallet, connector and policy boundaries documented against concrete abuse cases.

Shadow integration

Structured intents, signed state snapshots and decision receipts wired into your test path.

Decision report

Blocked, reviewed and unsafe actions with a production gap list and go/no-go recommendation.

Fixed scope. No custody, order routing, investment selection or performance fee.

Revenue model

Priced as infrastructure, never as a share of client profit.

Builder

€249 / month
  • 3 agents
  • 10,000 evaluations
  • 30-day audit
  • €0.02 overage

Production

€1,490 / month
  • 25 agents
  • 100,000 evaluations
  • Portfolio limits
  • 12-month audit

Enterprise

€7,500+ / month
  • Dedicated tenant
  • 1M evaluations
  • SSO/RBAC and SLA
  • Self-hosted option